Commit Graph

5616 Commits

Author SHA1 Message Date
Anders Eknert e43ef0a979 Use any in place of interface{} (#7566)
Earlier this evening I tried to run the Go
[modernize](https://pkg.go.dev/golang.org/x/tools/gopls/internal/analysis/modernize)
analyzer on OPA. That didn't go as planned:

- https://github.com/golang/go/issues/73661
- https://github.com/golang/go/issues/73663

While we wait for that to be fixed, I figured an old-fashioned
search-and-replace across the repo may work for at least the
`interface{}` to `any` conversion. That should help make it easier
to see the other fixes as applied by the modernize tool once it has
had those issues resolved.

Signed-off-by: Anders Eknert <anders@styra.com>
2025-05-12 13:57:48 +02:00
Charlie Egan f3cb38dc05 docs: Remove live blocks (#7572)
These are no longer being used and are dependent on an old version of
node to work.

I have disabled the generation to allow the new docs site to be built. I
thought it made sense to remove all things relating to live blocks since
we have no plans to support them now anyway.

Signed-off-by: Charlie Egan <charlie@styra.com>
2025-05-12 12:41:57 +01:00
Charlie Egan 23c06fa94d docs: Use Node 22 for all contexts (#7570)
This had been set only for previews before. This is needed to use
docusaurus. 10.x as used before is eol too and was only needed for live
block injection (which has been removed as we transition to the new
site).

Signed-off-by: Charlie Egan <charlie@styra.com>
2025-05-12 11:53:15 +01:00
Charlie Egan 53ab5b7a80 docs: Deploy a new OPA website under /new (#7534)
* New site v1

Signed-off-by: Charlie Egan <charlie@styra.com>

* Add feature and language pages

Signed-off-by: Charlie Egan <charlie@styra.com>

* tidy data generation

Signed-off-by: Charlie Egan <charlie@styra.com>

* Import docs

Signed-off-by: Charlie Egan <charlie@styra.com>

* WIP

Signed-off-by: Charlie Egan <charlie@styra.com>

* Update content d65888c14f

Signed-off-by: Charlie Egan <charlie@styra.com>

* Refactor site to support any base path

Signed-off-by: Charlie Egan <charlie@styra.com>

* Use base URL for nav icons

Signed-off-by: Charlie Egan <charlie@styra.com>

* Refactor locations of community and support logos

Signed-off-by: Charlie Egan <charlie@styra.com>

* More asset refactoring

Signed-off-by: Charlie Egan <charlie@styra.com>

* Move k8s docs into correct location

Signed-off-by: Charlie Egan <charlie@styra.com>

* Build the sidebar

Signed-off-by: Charlie Egan <charlie@styra.com>

* Fix CLI formatting

Signed-off-by: Charlie Egan <charlie@styra.com>

* Fix broken links

Signed-off-by: Charlie Egan <charlie@styra.com>

* Tidy nav with some dividers

Signed-off-by: Charlie Egan <charlie@styra.com>

* Deploy under /new

Signed-off-by: Charlie Egan <charlie@styra.com>

* Deploy new site on preview too

Signed-off-by: Charlie Egan <charlie@styra.com>

* docs: Link to OPA repo for GH nav link

Signed-off-by: Charlie Egan <charlie@styra.com>

* Updates to homepage

Signed-off-by: Charlie Egan <charlie@styra.com>

* docs: Add a logo grid to homepage

Signed-off-by: Charlie Egan <charlie@styra.com>

* docs: Update homepage to have improved layout

Signed-off-by: Charlie Egan <charlie@styra.com>

* docs: Update homepage rego example

Signed-off-by: Charlie Egan <charlie@styra.com>

* docs: Update homepage logo list

Signed-off-by: Charlie Egan <charlie@styra.com>

* docs: Update PlaygroundExample to used ?? operator

Signed-off-by: Charlie Egan <charlie@styra.com>

* docs: Add a simple search

We might want to come back to this later to make the results better but
this is as good as the current search.

Signed-off-by: Charlie Egan <charlie@styra.com>

* docs: Add a docs archive page

Signed-off-by: Charlie Egan <charlie@styra.com>

* docs: Revise homepage content and use demo video

Signed-off-by: Charlie Egan <charlie@styra.com>

* docs: correct archive version list

Signed-off-by: Charlie Egan <charlie@styra.com>

* docs: Only support light mode

This is something we can come back to when we have time to review the
graphics for multi mode

Signed-off-by: Charlie Egan <charlie@styra.com>

* docs: Link is available by default

Signed-off-by: Charlie Egan <charlie@styra.com>

* docs: Remove blue hero color, and use smaller logo grid

Signed-off-by: Charlie Egan <charlie@styra.com>

* docs: Correct ecosystem feature links

Signed-off-by: Charlie Egan <charlie@styra.com>

* docs: Drop loadEcosystem

This is no longer needed as ecosystem pages are now loaded like other
pages (no special asset handling).

Signed-off-by: Charlie Egan <charlie@styra.com>

* docs: Update content to f308f61

This branch duplicates content to reformat some of it for the new site.
This commit ports in some of the new changes.

https://github.com/open-policy-agent/opa/compare/f7b002e17...f308f612b

Signed-off-by: Charlie Egan <charlie@styra.com>

* docs: Update slack logos

Use one with a transparent background instead.

Signed-off-by: Charlie Egan <charlie@styra.com>

* docs: Use styled components, clear custom css

This keeps custom css to a minimum. Used for side by side and for hiding
the codeAPI text.

Signed-off-by: Charlie Egan <charlie@styra.com>

* docs: Update archive to show 1.4.2 release

Signed-off-by: Charlie Egan <charlie@styra.com>

---------

Signed-off-by: Charlie Egan <charlie@styra.com>
2025-05-12 10:36:10 +01:00
Anders Eknert f308f612b6 Don't generate JSON values for wildcard/generated keys in result set (#7567)
Saw this by accident, and while I'm not sure how common this is,
there's really never any point in serializing a JSON value unless
it is known to be used later.

Signed-off-by: Anders Eknert <anders@styra.com>
2025-05-11 10:54:13 +02:00
efi shtain 13f212ba53 add support for aws sso credentials provider (#7527)
Signed-off-by: Efi Shtain <efi@autokitteh.com>
2025-05-09 11:27:17 -05:00
Sebastian Spaink 5a8932326f build: bump go to 1.24.3 (#7553)
Signed-off-by: sspaink <sspaink@styra.com>
2025-05-07 14:32:26 -05:00
Sebastian Spaink 4a9cdf4e4b github_actions: monthly check for broken hyperlinks (#7537)
Signed-off-by: sspaink <sspaink@styra.com>
2025-05-07 11:46:16 -05:00
xubin 8d5077ea00 Fix: only use JSON-escaped literal when needed in Ref.String() (#7552)
Fixes #7550 

Signed-off-by: Xubin Zheng <xubzheng@gmail.com>
2025-05-07 10:04:47 +02:00
Sebastian Spaink c99bf28eec runtime: don't override user set commit and timestamp (#7549)
Signed-off-by: sspaink <sspaink@styra.com>
2025-05-05 12:03:44 -05:00
robmyersrobmyers 7dd0dceb6d refactor: Remove internal/gqlparser and use upstream instead. (#7538)
This updates gqlparser from version ~v2.5.1 and the June 2018 GraphQL spec to
v2.5.26 and the October 2021 GraphQL spec.

Signed-off-by: Rob Myers <1243316+robmyersrobmyers@users.noreply.github.com>
2025-05-05 11:11:27 -05:00
Johan Fylling f2769a2c0f ast: Retaining SomeDecl Location field when compiler resolves refs (#7548)
Fixes: #7543

Signed-off-by: Johan Fylling <johan.dev@fylling.se>
2025-05-05 17:53:19 +02:00
dependabot[bot] 32ab199410 build(deps): bump the gha-dependencies group with 2 updates (#7539)
Bumps the gha-dependencies group with 2 updates: [github/codeql-action](https://github.com/github/codeql-action) and [actions/download-artifact](https://github.com/actions/download-artifact).


Updates `github/codeql-action` from 3.28.13 to 3.28.16
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/1b549b9259bda1cb5ddde3b41741a82a2d15a841...28deaeda66b76a05916b6923827895f2b14ab387)

Updates `actions/download-artifact` from 4.2.1 to 4.3.0
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/95815c38cf2ff2164869cbab79da8d1f422bc89e...d3f86a106a0bac45b974a628896c90dbdf5c8093)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.28.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gha-dependencies
- dependency-name: actions/download-artifact
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gha-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-05-05 16:37:11 +02:00
dependabot[bot] 15470f9fa0 build(deps): bump the dependencies group with 5 updates (#7540)
Bumps the dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/fsnotify/fsnotify](https://github.com/fsnotify/fsnotify) | `1.8.0` | `1.9.0` |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.21.1` | `1.22.0` |
| [github.com/prometheus/client_model](https://github.com/prometheus/client_model) | `0.6.1` | `0.6.2` |
| [golang.org/x/net](https://github.com/golang/net) | `0.38.0` | `0.39.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.71.1` | `1.72.0` |


Updates `github.com/fsnotify/fsnotify` from 1.8.0 to 1.9.0
- [Release notes](https://github.com/fsnotify/fsnotify/releases)
- [Changelog](https://github.com/fsnotify/fsnotify/blob/main/CHANGELOG.md)
- [Commits](https://github.com/fsnotify/fsnotify/compare/v1.8.0...v1.9.0)

Updates `github.com/prometheus/client_golang` from 1.21.1 to 1.22.0
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.21.1...v1.22.0)

Updates `github.com/prometheus/client_model` from 0.6.1 to 0.6.2
- [Release notes](https://github.com/prometheus/client_model/releases)
- [Commits](https://github.com/prometheus/client_model/compare/v0.6.1...v0.6.2)

Updates `golang.org/x/net` from 0.38.0 to 0.39.0
- [Commits](https://github.com/golang/net/compare/v0.38.0...v0.39.0)

Updates `google.golang.org/grpc` from 1.71.1 to 1.72.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.71.1...v1.72.0)

---
updated-dependencies:
- dependency-name: github.com/fsnotify/fsnotify
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/prometheus/client_model
  dependency-version: 0.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: golang.org/x/net
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: google.golang.org/grpc
  dependency-version: 1.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-05 16:16:14 +02:00
Johan Fylling 967b4940ff Prepare v1.5.0 development (#7542)
Signed-off-by: Johan Fylling <johan.dev@fylling.se>
2025-05-05 16:04:53 +02:00
Sebastian Spaink 03da822be9 Patch release v1.4.2 (#7546)
Signed-off-by: sspaink <sspaink@styra.com>
2025-05-02 13:30:51 -05:00
Sebastian Spaink 026ea16d28 build: bump go to 1.24.2 (#7544)
Signed-off-by: sspaink <sspaink@styra.com>
2025-05-02 10:25:05 -05:00
Johan Fylling 8b0720247e Prepare v1.4.0 release (#7541)
Signed-off-by: Johan Fylling <johan.dev@fylling.se>
v1.4.0
2025-05-01 17:01:50 +02:00
Johan Fylling ad2063247a Merge commit from fork
to disable code injection attacks, where Rego code can be injected into the constructed evaluation query.

See Security Advisory: https://github.com/open-policy-agent/opa/security/advisories/GHSA-6m8w-jc87-6cr7

Fixes: #GHSA-6m8w-jc87-6cr7
2025-05-01 16:26:52 +02:00
Sebastian Spaink 24ff9cfb3a fix: return the raw strings when formatting (#7525)
prevent `\u0000` from being changed to `\x00` 

Signed-off-by: sspaink <sspaink@styra.com>
2025-04-25 12:04:16 -05:00
Sebastian Spaink 254f3bf0b9 fix(status plugin): make sure the latest status is read before manually triggering or returning a snapshot (#7533)
* when manually triggering, make sure the latest status event is registered. Only one status event should exist.
* read bundle status for snapshot as well
* revert back to buffering 1 status event

Signed-off-by: sspaink <sspaink@styra.com>
2025-04-25 18:04:18 +02:00
Sebastian Spaink 9b5f6010c0 docs: fix post merge badge (#7532)
Signed-off-by: sspaink <sspaink@styra.com>
2025-04-24 09:06:53 +01:00
Charlie Egan e490277477 docs: Point path versioned requests to new sites (#7531)
Following #7528, we also need to route any requests using the old
versioned paths to the correct location.

Signed-off-by: Charlie Egan <charlie@styra.com>
2025-04-23 14:54:07 +01:00
Sebastian Spaink d65888c14f plugins/status: FIFO buffer channel for status events to prevent slow status API blocking (#7522)
If a status API is slow to respond it can cause OPA to be blocked writing to an unbuffered channel. This fixes it by using a buffered channel that never blocks but drops the oldest status update if full.

Signed-off-by: Sebastian Spaink <3441183+sspaink@users.noreply.github.com>
2025-04-23 11:53:09 +02:00
Charlie Egan eb77d10971 docs: update edge links to use /docs/edge/ path (#7529)
No versioned archive deploy is available/maintained for this tag.

Signed-off-by: Charlie Egan <charlie@styra.com>
2025-04-22 15:40:43 +01:00
Charlie Egan f07d604b4f docs: Set versioned docs links to point to archive (#7528)
In the version dropdown, v1.2.0 used to point to:

https://www.openpolicyagent.org/docs/v1.2.0/

Now it'll point to the archived version for that release.

https://v1-2-0--opa-docs.netlify.app/

This is being done as part of https://github.com/open-policy-agent/opa/issues/7037

Signed-off-by: Charlie Egan <charlie@styra.com>
2025-04-22 15:13:58 +01:00
Ali Jalal 828b8cb156 docs: improve request headers documentation in REST APIs (#7524)
Signed-off-by: ali-jalaal <4487124+ali-jalaal@users.noreply.github.com>
2025-04-21 10:26:56 -05:00
robmyersrobmyers 31c7d8b966 graphql: Cache GraphQL schema parse results (#7457)
This commit stores parsed GraphQL schemas to the cache, which improves
the performance of GraphQL operations that parse the schema more than once.

Queries are not cached.

Resolves: #5377

Signed-off-by: Rob Myers <1243316+robmyersrobmyers@users.noreply.github.com>
2025-04-17 17:59:08 +02:00
robmyersrobmyers 56c9aa5bbe gqlparser: Add JSON annotation in internal/gqlparser/ast to Position fields (#7509)
Annotate internal/gqlparser structs not to include Position when marshaled
to JSON.  This makes the JSON roundtrip succeed without allocating a ton of
memory for JSON fields that will be subsequently pruned.

Upstream PR: https://github.com/vektah/gqlparser/pull/364

$ time ./reproducer-pre-fix
Now passing 1262568 bytes to builtinGraphQLParseSchema() to reproduce the issue in ast.InterfaceToValue()
Alloc = 4159 MiB	TotalAlloc = 5625 MiB	Sys = 5584 MiB	NumGC = 18
Alloc = 8312 MiB	TotalAlloc = 11169 MiB	Sys = 11125 MiB	NumGC = 19
Alloc = 8312 MiB	TotalAlloc = 11169 MiB	Sys = 11125 MiB	NumGC = 19
Alloc = 16615 MiB	TotalAlloc = 22247 MiB	Sys = 22209 MiB	NumGC = 20
Alloc = 16615 MiB	TotalAlloc = 22247 MiB	Sys = 22209 MiB	NumGC = 20
Alloc = 16615 MiB	TotalAlloc = 22247 MiB	Sys = 22209 MiB	NumGC = 20
Alloc = 38765 MiB	TotalAlloc = 44397 MiB	Sys = 44377 MiB	NumGC = 20
Alloc = 33223 MiB	TotalAlloc = 44397 MiB	Sys = 44377 MiB	NumGC = 21

$ time ./reproducer-post-fix
Now passing 1262568 bytes to builtinGraphQLParseSchema() to reproduce the issue in ast.InterfaceToValue()

real	0m0.545s
user	0m0.201s
sys	0m0.028s

Signed-off-by: Rob Myers <1243316+robmyersrobmyers@users.noreply.github.com>
2025-04-16 17:57:31 +02:00
Lars Haugan 9ac87770fc docs: Update opa-docker-authz example to use ghcr and v0.10 release tag
Signed-off-by: Lars Haugan <lars.haugan@sparebank1.no>
2025-04-16 15:06:01 +02:00
Sebastian Spaink 0fb752607b fix: don't panic on format due to unexpected comments (#7458)
fix: don't panic on format due to unexpected comments

comments next to object elements is valid rego, instead of panicking
catch the error and write the rule as-is.

Signed-off-by: sspaink <sspaink@styra.com>
2025-04-15 08:55:47 -05:00
robmyersrobmyers a3be450eb9 doc: update builtin function examples for v1 (#7514) (#7515)
Signed-off-by: Rob Myers <1243316+robmyersrobmyers@users.noreply.github.com>
2025-04-14 09:09:48 -05:00
percyding-tavo cc0e87d23a Add tavo to ecosystem integration (#7511)
Signed-off-by: percyding <dwf838845792@gmail.com>
Co-authored-by: percyding <dwf838845792@gmail.com>
2025-04-14 10:22:31 +01:00
Finsen Varghese 2c123669d0 docs: fixed broken docs link (#7510)
Fixes: #7452

Signed-off-by: Finsen Varghese <3069588+fvarg00@users.noreply.github.com>
2025-04-11 16:46:00 +02:00
Sebastian Spaink f8c87c5af7 build(deps): bump github.com/hypermodeinc/badger from v4.6.0 to v4.7.0 (#7508)
Signed-off-by: sspaink <sspaink@styra.com>
2025-04-11 11:07:41 +02:00
Sebastian Spaink 8424eea2a3 fix: remove resource.syso after building windows binary (#7507)
Signed-off-by: sspaink <sspaink@styra.com>
2025-04-10 10:06:39 -05:00
Sebastian Spaink 804dcc1c98 feat: add version and icon to opa_windows_amd64.exe (#7501)
Signed-off-by: sspaink <sspaink@styra.com>
Co-authored-by: Philip Conrad <philip@chariot-chaser.net>
2025-04-10 07:41:59 -05:00
Charlie Egan f01cc53d9a ecosystem: Update traefik integration docs
Signed-off-by: Charlie Egan <charlie@styra.com>
2025-04-10 10:16:21 +00:00
Johan Fylling 6dbb4fab2b topdown: Handling default functions in Partial Eval (#7499)
Making Partial Eval (PE) respect default functions.

Before this fix, Rego functions with declared default values weren't respected by PE, and the default declaration was omitted from generated support modules.

Fixes: #7220

Signed-off-by: Johan Fylling <johan.dev@fylling.se>
2025-04-10 11:40:53 +02:00
Johan Fylling 5a62130b23 build: bump go to 1.23.8 (#7502)
CVE-2025-22871

https://pkg.go.dev/vuln/GO-2025-3563

Signed-off-by: Johan Fylling <johan.dev@fylling.se>
2025-04-09 14:26:54 +02:00
Charlie Egan 7378ec2c5f ecosystem: Add NACP integration
This is a nomad admission controller based on OPA.

Signed-off-by: Charlie Egan <charlie@styra.com>
2025-04-09 13:03:31 +02:00
Kapil Madan f2377ce961 Add Principled Evolution integration (#7495)
Add Principled Evolution integration

Signed-off-by: kapil.madan <kapil.madan@gmail.com>
2025-04-08 08:53:10 -05:00
ndouglas-cloudsmith 820bf4fc5c Cloudsmith adds support for OPA (#7498)
Add Cloudsmith to adopters file.

Signed-off-by: ndouglas-cloudsmith <ndouglas@cloudsmith.io>
2025-04-07 16:16:27 +02:00
Kapil Madan 1bbd38ab3e docs: Add link to inline schema annotations (#7496)
Signed-off-by: kapil.madan <kapil.madan@gmail.com>
2025-04-04 16:33:53 -05:00
Charlie Egan 8fe5571292 docs: Revert slack link change
This redirect has been reconfigured.

Signed-off-by: Charlie Egan <charlie@styra.com>
2025-04-03 16:05:11 +00:00
Johan Fylling 93c177449c ast: Adding rego_v1 feature to --v0-compatible capabilities (#7474)
to allow for using Rego v1 bundles in `opa build`/`check`/`eval`/`test`.

Before this change, a bundle with `1` as `rego_version`/`file_rego_versions` would be rejected when evaluated with the `--v0-compatible` flag with the error:

```
rego_parse_error: illegal capabilities: rego_v1 feature required for parsing v1 Rego
```

This is fixed by adding the `rego_v1` feature to the `v0` default capabilities applied when using the `--v0-compatible` flag. Note: this allows OPA to accept Rego `v1` modules inside bundles, but modules without a specified Rego version, such as freestanding non-bundle modules or modules inside bundles with no specified Rego version, are parsed as `v0`.

Signed-off-by: Johan Fylling <johan.dev@fylling.se>
2025-04-03 11:30:53 +02:00
Stephan Renatus 13831ee5b3 topdown: fix wall clock time init for PartialRun()
Fixes #7490.

Signed-off-by: Stephan Renatus <stephan@styra.com>
2025-04-03 11:21:21 +02:00
Charlie Egan 617e0966cd docs: Update community slack inviter link
Signed-off-by: Charlie Egan <charlie@styra.com>
2025-04-02 08:53:17 +00:00
dependabot[bot] 9c68b8f13c build(deps): bump the dependencies group with 4 updates (#7485)
Bumps the dependencies group with 4 updates: [github.com/spf13/viper](https://github.com/spf13/viper), [golang.org/x/net](https://github.com/golang/net), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [oras.land/oras-go/v2](https://github.com/oras-project/oras-go).


Updates `github.com/spf13/viper` from 1.18.2 to 1.20.1
- [Release notes](https://github.com/spf13/viper/releases)
- [Commits](https://github.com/spf13/viper/compare/v1.18.2...v1.20.1)

Updates `golang.org/x/net` from 0.37.0 to 0.38.0
- [Commits](https://github.com/golang/net/compare/v0.37.0...v0.38.0)

Updates `google.golang.org/grpc` from 1.71.0 to 1.71.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.71.0...v1.71.1)

Updates `oras.land/oras-go/v2` from 2.3.1 to 2.5.0
- [Release notes](https://github.com/oras-project/oras-go/releases)
- [Commits](https://github.com/oras-project/oras-go/compare/v2.3.1...v2.5.0)

---
updated-dependencies:
- dependency-name: github.com/spf13/viper
  dependency-version: 1.20.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: golang.org/x/net
  dependency-version: 0.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: google.golang.org/grpc
  dependency-version: 1.71.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: oras.land/oras-go/v2
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-01 20:19:23 +02:00
dependabot[bot] 23ce6710eb build(deps): bump the gha-dependencies group with 5 updates (#7486)
Bumps the gha-dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [github/codeql-action](https://github.com/github/codeql-action) | `3.28.10` | `3.28.13` |
| [8398a7/action-slack](https://github.com/8398a7/action-slack) | `3.16.2` | `3.18.0` |
| [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) | `0.29.0` | `0.30.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.1` | `4.6.2` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `4.1.9` | `4.2.1` |


Updates `github/codeql-action` from 3.28.10 to 3.28.13
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d...1b549b9259bda1cb5ddde3b41741a82a2d15a841)

Updates `8398a7/action-slack` from 3.16.2 to 3.18.0
- [Release notes](https://github.com/8398a7/action-slack/releases)
- [Commits](https://github.com/8398a7/action-slack/compare/28ba43ae48961b90635b50953d216767a6bea486...1750b5085f3ec60384090fb7c52965ef822e869e)

Updates `aquasecurity/trivy-action` from 0.29.0 to 0.30.0
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](https://github.com/aquasecurity/trivy-action/compare/18f2510ee396bbf400402947b394f2dd8c87dbb0...6c175e9c4083a92bbca2f9724c8a5e33bc2d97a5)

Updates `actions/upload-artifact` from 4.6.1 to 4.6.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1...ea165f8d65b6e75b540449e92b4886f43607fa02)

Updates `actions/download-artifact` from 4.1.9 to 4.2.1
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/cc203385981b70ca67e1cc392babf9cc229d5806...95815c38cf2ff2164869cbab79da8d1f422bc89e)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.28.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gha-dependencies
- dependency-name: 8398a7/action-slack
  dependency-version: 3.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gha-dependencies
- dependency-name: aquasecurity/trivy-action
  dependency-version: 0.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gha-dependencies
- dependency-name: actions/upload-artifact
  dependency-version: 4.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gha-dependencies
- dependency-name: actions/download-artifact
  dependency-version: 4.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gha-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-01 20:05:58 +02:00